Privacy Policy

Last updated: 15 October 2026

PT Herro Solusi Digital ("Herro," "we," or "us") provides a workspace that helps businesses manage WhatsApp customer conversations, customer records, orders, and follow-up. This policy explains how personal data is handled when you visit our website or use Herro.

When a business uses Herro to process its customers' information, that business decides why it uses the information. Herro processes that information to provide the service and follow the business's instructions. If you are a customer of a business that uses Herro, contact that business about its privacy practices.

Information we process

• Account and workspace information: names, email addresses, workspace membership, and access roles.
• WhatsApp information: business account and phone identifiers, customer phone numbers and profile details, message content, timestamps, delivery status, templates, and supported attachments.
• Business and commerce information: customer and product records, order and delivery details, invoices, payment status, and files or payment evidence submitted through the service.
• Connected service information: identifiers, connection details, and records needed to operate integrations that a business chooses to connect, such as WhatsApp or Accurate.
• Service and security information: information needed to authenticate users, keep the service reliable, investigate errors, and protect accounts.

How we use information

We use information to provide and maintain Herro; receive and send business messages; show conversation history and delivery status to authorized workspace members; support customer service, order management, reminders, and reporting; operate connected integrations; provide support; and protect the service.

When a business uses Herro's AI features, relevant message content and business context may be sent to the AI provider configured for that workspace, currently DeepSeek or OpenAI, to generate a reply or suggestion.

How information is shared

We share information only as needed to provide Herro, when a business directs us to do so, or when law requires it. This can include:

• Workspace members authorized by the business.
• Meta and WhatsApp, to deliver messages and operate WhatsApp Business features selected by the business.
• Supabase, for authentication, database, and file storage services.
• Cloudflare, for the Herro website and network services.
• DeepSeek or OpenAI, when AI features are used, as described above.
• Accurate or another connected provider, when a business enables an integration.

These providers may process information in countries where they or their systems operate. Their own privacy notices also apply to their services.

Retention

While a Herro workspace is active, we keep workspace and customer information as needed to provide the service and follow the business's instructions. After we verify a deletion request and have the authority needed to act, we delete or de-identify information under our control within 30 days, unless we must keep specific records for legal, accounting, security, fraud-prevention, or dispute-resolution purposes. Deleted information may remain in backups for up to 30 days while those backups rotate.

A business may keep its own copies of customer, order, invoice, or payment records for its service, accounting, or legal needs. That business sets the retention period for those records.

Security

We use access controls and technical safeguards designed to protect information. No internet service can guarantee that information is completely secure.

Your choices and requests

You can ask to access, correct, or delete personal information, subject to applicable law and the business's responsibilities. If the information is held in a business workspace, the business that controls that workspace may need to handle the request. See our data deletion instructions.

Browser storage

Herro uses browser storage needed to keep users signed in and maintain service sessions. You can clear this storage in your browser, but doing so may sign you out.

Changes to this policy

We may update this policy as the service changes. We will update the date at the top when we publish a revised version.

Contact

If you have a Herro workspace, submit a request through the form on our data deletion instructions page. Use the email associated with your Herro account to identify yourself; the form is where you send the request. If you are a customer of a business that uses Herro, contact that business directly.